Files
DungeonsDragons/backend
Thorsten d62970ee1b Fix backend dependency vulnerabilities (36 CVEs across 6 packages)
Upgrades fastapi (0.115.6->0.141.1, pulling starlette to 1.6.0),
fastapi-users (14.0.1->15.0.5), aiosmtplib (3.0.2->5.1.2),
python-multipart (0.0.20->0.0.32), and sentence-transformers
(3.3.1->6.0.1, pulling transformers and pyjwt to patched versions).

Verified via pip-audit (zero remaining findings across all 97
resolved dependencies) and functional smoke tests: auth flow, RAG
embedding/retrieval (dimension still 384, similarity still sane),
DM-turn tool-calling (roll_dice still fires correctly), and a live
WebSocket handshake/send/broadcast round trip against the upgraded
Starlette.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-06 21:26:10 +02:00
..